chore(deps): bump openai from 4.104.0 to 7.7.0 in /ai

[dependabot]

Bumps openai from 4.104.0 to 7.7.0.

Release notes

Sourced from openai's releases.

v7.7.0

7.7.0 (2026-08-26)

Features

• api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

• streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

v7.6.0

7.6.0 (2026-08-26)

Features

• api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
• api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
• api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
• auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
• auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
• auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
• auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
• support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

• [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
• assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
• audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)
• auth: honor an explicit zero GCP metadata timeout (#2481) (7a9dec8)
• auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
• auth: sanitize malformed workload OAuth token responses (#2468) (cd5b2d8)
• avoid double-counting logprobs in streamed chat completions (#2444) (ddf9922)
• bedrock: honor cancellation during bearer credential resolution (#2478) (2dac2f4)
• drain tee stream queues in linear time (#2379) (1f3ce07)
• polling: honor cancellation during polling delays (#2477) (520d604)
• preserve large streaming responses (#2433) (4e588c2)
• preserve multipart upload array order (#2380) (f1a2b61)
• publish Castiron checks for behind-main pull requests (#2486) (662bb37)
• publish Castiron checks for external-fork pull requests (#2464) (a90581e)
• security: abort streaming examples when clients disconnect (#2426) (b32a25b)
• security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
• security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
• security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
• security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)

... (truncated)

Changelog

Sourced from openai's changelog.

7.7.0 (2026-08-26)

Features

• api: make function call output call IDs optional (#2488) (b932ae6)

Bug Fixes

• streaming: honor cancellation while decoding SSE responses (#2487) (ababe12)

7.6.0 (2026-08-26)

Features

• api: Add obfuscation field to ChatCompletionChunk (#2423) (39afa3a)
• api: Add project residency and usage quantity_unit fields (#2461) (26d8158)
• api: support backend-mediated Realtime WebRTC calls (#2469) (0d12ca8)
• auth: add pinned X.509 workload token exchange (#2470) (9dd8648)
• auth: attest cross-module X.509 transport capabilities (#2471) (c6769fa)
• auth: harden X.509 token lifecycle and tenant isolation (#2473) (6992683)
• auth: integrate attested X.509 workload identity into clients (#2472) (ee5229b)
• support named data-residency endpoints (#2393) (62d98dd)

Bug Fixes

• [responses] Avoid quadratic comparisons when accumulating long text (#2434) (95628ce)
• assistants: reject run-step identity hijacking before tool callbacks (#2476) (63b1c75)
• audio: preserve recording outcomes during cancellation and cleanup (#2482) (dafcac4)
• auth: honor an explicit zero GCP metadata timeout (#2481) (7a9dec8)
• auth: sanitize malformed Azure IMDS token responses (#2427) (bbfb792)
• auth: sanitize malformed workload OAuth token responses (#2468) (cd5b2d8)
• avoid double-counting logprobs in streamed chat completions (#2444) (ddf9922)
• bedrock: honor cancellation during bearer credential resolution (#2478) (2dac2f4)
• drain tee stream queues in linear time (#2379) (1f3ce07)
• polling: honor cancellation during polling delays (#2477) (520d604)
• preserve large streaming responses (#2433) (4e588c2)
• preserve multipart upload array order (#2380) (f1a2b61)
• publish Castiron checks for behind-main pull requests (#2486) (662bb37)
• publish Castiron checks for external-fork pull requests (#2464) (a90581e)
• security: abort streaming examples when clients disconnect (#2426) (b32a25b)
• security: authenticate Cloudflare tests and restrict streaming proxies (#2413) (9286fdb)
• security: authenticate Vercel ecosystem APIs and clean up uploaded files (#2412) (d58608a)
• security: bound SDK event streams and validate streamed item identities (#2415) (7df29a9)
• security: bound SSE frames and NDJSON lines before buffering (#2411) (0e250a4)
• security: close rejected Azure managed-identity response streams (#2416) (387bbc8)
• security: harden Bedrock regions, query merges, and upload errors (#2410) (ce45d0d)

... (truncated)

Commits

• 6f6411e release: 7.7.0 (#2489)
• b932ae6 feat(api): make function call output call IDs optional (#2488)
• ababe12 fix(streaming): honor cancellation while decoding SSE responses (#2487)
• 6d1d54a release: 7.6.0 (#2381)
• cd5b2d8 fix(auth): sanitize malformed workload OAuth token responses (#2468)
• 662bb37 fix: publish Castiron checks for behind-main pull requests (#2486)
• 2dac2f4 fix(bedrock): honor cancellation during bearer credential resolution (#2478)
• dafcac4 fix(audio): preserve recording outcomes during cancellation and cleanup (#2482)
• 520d604 fix(polling): honor cancellation during polling delays (#2477)
• 63b1c75 fix(assistants): reject run-step identity hijacking before tool callbacks (#2...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for openai since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)